Vulnerability Description
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Antivirus Plus | < 24.0.26.136 |
| Bitdefender | Internet Security | < 24.0.26.136 |
| Bitdefender | Total Security | < 24.0.26.136 |
Related Weaknesses (CWE)
References
- https://www.bitdefender.com/support/security-advisories/process-control-vulnerabVendor Advisory
- https://www.bitdefender.com/support/security-advisories/process-control-vulnerabVendor Advisory
FAQ
What is CVE-2020-8107?
CVE-2020-8107 is a vulnerability with a CVSS score of 8.2 (HIGH). A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bit...
How severe is CVE-2020-8107?
CVE-2020-8107 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-8107?
Check the references section above for vendor advisories and patch information. Affected products include: Bitdefender Antivirus Plus, Bitdefender Internet Security, Bitdefender Total Security.